Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ba3516-fe76-3e1f-a033-6822ef545af9.roa
File:                     b3ba3516-fe76-3e1f-a033-6822ef545af9.roa (raw, json)
Hash identifier:          zco4YVKcrsAWGppPWt3H9vA4TIvzP+dNoR9Dpmn+mW4=
Subject key identifier:   4A:96:28:94:63:AD:13:A5:31:DA:98:AB:79:56:8E:AA:DF:F7:F2:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1E2D00E33780E6E2D8EAE0A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ba3516-fe76-3e1f-a033-6822ef545af9.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     396596
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2d:00:e3:37:80:e6:e2:d8:ea:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=6c124e7d-9195-4ec7-af17-960ef6d1ce71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:d6:69:83:93:f6:7a:fd:38:85:b3:21:e8:
                    a2:32:c6:46:c0:e2:e3:8c:7a:47:4d:a3:71:17:18:
                    03:7f:ee:71:54:62:e6:df:dd:bf:3d:41:69:6d:60:
                    83:3f:1e:3c:5c:8b:4e:eb:e5:ca:a9:1c:47:2d:e5:
                    ee:de:09:d8:71:58:c1:4b:b7:72:fd:a5:24:94:f6:
                    73:bc:4a:a5:9f:31:77:4d:63:eb:7c:9a:f8:dd:ef:
                    ec:86:c8:91:64:35:6b:db:05:36:7a:d4:b7:0a:f7:
                    b3:da:99:42:f1:bd:1e:a9:82:c7:e0:39:39:86:13:
                    a5:b9:2d:52:ab:18:85:73:02:20:05:4d:aa:6c:78:
                    5d:a6:ed:46:fc:20:4d:a4:eb:0f:af:18:54:d0:62:
                    b5:74:08:1a:62:fa:f6:96:a8:55:c4:39:07:dd:34:
                    d6:ce:13:4d:02:b1:4f:99:e1:1a:2e:1e:0f:75:7d:
                    57:e1:c3:8b:e9:64:47:82:09:16:44:dc:71:e3:d0:
                    cb:a0:23:6f:3c:55:9c:3f:3c:43:cd:2c:33:d1:5e:
                    05:cc:d8:00:00:bc:ff:24:30:29:87:0c:05:b7:4b:
                    a8:cc:36:fc:2d:db:f9:b5:ab:bb:85:b5:9a:12:74:
                    43:f0:10:f1:f1:40:da:cf:de:63:28:fb:ee:84:35:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:96:28:94:63:AD:13:A5:31:DA:98:AB:79:56:8E:AA:DF:F7:F2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3ba3516-fe76-3e1f-a033-6822ef545af9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:66:e4:d5:63:dc:fd:f0:56:fe:4d:1f:47:d2:1b:d6:ae:
         41:d4:8e:94:94:92:80:87:c3:2e:28:07:d8:4b:91:3b:bc:ee:
         b1:14:72:1a:4c:69:d1:dc:29:81:86:33:0c:0f:e9:28:b4:d0:
         c6:71:02:fc:69:1e:60:95:fa:86:63:44:4b:32:49:43:8f:ce:
         13:6d:f6:09:d1:27:5a:98:86:8a:a5:84:61:95:f0:c5:8c:8b:
         6d:e3:d9:01:83:84:2d:f2:10:d5:94:3f:00:c7:bd:9b:b7:63:
         5d:f4:be:94:bb:01:78:8f:fe:1b:46:7d:8c:2e:27:b4:a5:91:
         79:8b:2b:2c:f1:cf:4e:ad:f3:e0:d8:97:d2:4c:65:9f:54:91:
         7e:c1:72:31:a6:4b:05:4e:18:44:c7:36:31:e6:fa:77:fa:db:
         4a:52:c0:5f:a1:98:df:1e:ba:b1:d0:d7:14:cc:ff:a8:91:15:
         25:02:ea:85:ed:32:c5:02:0a:74:6e:9c:7d:00:2d:fd:10:83:
         8d:e4:cd:d8:12:dc:89:7c:b7:95:f5:69:16:a3:ae:29:2a:36:
         dc:3f:68:b8:f0:06:49:14:83:df:f2:2f:06:d3:a6:b9:39:09:
         50:de:36:69:4d:69:be:9d:4f:ae:f8:68:b4:75:c4:79:58:cc:
         89:c9:05:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLQDjN4Dm4tjq4KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk
NmMxMjRlN2QtOTE5NS00ZWM3LWFmMTctOTYwZWY2ZDFjZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUzWaYOT9nr9OIWzIeiiMsZGwOLjjHpHTaNx
FxgDf+5xVGLm392/PUFpbWCDPx48XItO6+XKqRxHLeXu3gnYcVjBS7dy/aUklPZz
vEqlnzF3TWPrfJr43e/shsiRZDVr2wU2etS3Cvez2plC8b0eqYLH4Dk5hhOluS1S
qxiFcwIgBU2qbHhdpu1G/CBNpOsPrxhU0GK1dAgaYvr2lqhVxDkH3TTWzhNNArFP
meEaLh4PdX1X4cOL6WRHggkWRNxx49DLoCNvPFWcPzxDzSwz0V4FzNgAALz/JDAp
hwwFt0uozDb8Ldv5tau7hbWaEnRD8BDx8UDaz95jKPvuhDVOGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqWKJRjrROlMdqYq3lWjqrf9/LxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjNiYTM1MTYtZmU3Ni0z
ZTFmLWEwMzMtNjgyMmVmNTQ1YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+gZuTVY9z98Fb+TR9H0hvWrkHUjpSUkoCHwy4oB9hLkTu87rEUchpM
adHcKYGGMwwP6Si00MZxAvxpHmCV+oZjREsySUOPzhNt9gnRJ1qYhoqlhGGV8MWM
i23j2QGDhC3yENWUPwDHvZu3Y130vpS7AXiP/htGfYwuJ7SlkXmLKyzxz06t8+DY
l9JMZZ9UkX7BcjGmSwVOGETHNjHm+nf620pSwF+hmN8eurHQ1xTM/6iRFSUC6oXt
MsUCCnRunH0ALf0Qg43kzdgS3Il8t5X1aRajrikqNtw/aLjwBkkUg9/yLwbTprk5
CVDeNmlNab6dT674aLR1xHlYzInJBf8=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:57:46 2026 by rpki-client